Verifying private certificate before SSL connection

2009-03-08 Thread Liz Voss
I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using to verify peer certificate but I am expe

Re: Verifying private certificate before SSL connection

2009-03-07 Thread Liz Voss
Found the problem... The x509 pointer should not be free since the ssl_ctx will continue to use it. Thanks Liz Liz Voss wrote: Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expi

RE: Verifying private certificate before SSL connection

2009-03-07 Thread Giang Nguyen
lizv...@sisconet.com > To: openssl-users@openssl.org > Subject: Verifying private certificate before SSL connection > > Hello, > I need to implement new requirement to verify private certificate before > it is used for SSL/TLS connection. > Basically I should not use certificate

Verifying private certificate before SSL connection

2009-03-07 Thread Liz Voss
Hello, I need to implement new requirement to verify private certificate before it is used for SSL/TLS connection. Basically I should not use certificate that is expired or revoked. I am working with OpenSSL 0.9.8i. I made function similar to what we are using to verify peer certificate but I